A security vendor called Wiz has published a state-of-PQC report this week with a line in it that should make anyone who has actually migrated anything ever in IT spit their coffee out with disgust. Can these guys get any more tone-deaf and arrogant? Session negotiation key exchange for both TLS and SSH is a … Continue reading Wiz Declares Post-Quantum Solved! Go Home Everyone→
The security industry has a problem. There are growing concerns about potential ethical boundaries in cybersecurity research, particularly regarding Wiz’s approach to vulnerability disclosure. The recent blog post by Wiz is a good example. They basically lay out unethical intrusion, a targeted operation without authorization with hallmarks of military intelligence tactics, as if it’s just … Continue reading Wiz DeepSeek “Research” Ignores Ethical Line – And They Know It→
I recently discussed the controversial security firm known as Wiz in one of my previous articles. In that post, I just mentioned briefly a dispute between Wiz and another security company named Orca, which has now brought to light an intriguing revelation about Wiz’s security product. In a well-documented lawsuit, Orca alleges that Wiz unlawfully … Continue reading Did Wiz Breach Customer Privacy With Its “MRI” Snapshot Architecture?→
Numerous inquiries have been directed to me regarding a recent Microsoft incident related to AI data loss, with several individuals seeking my expert commentary. At this juncture, it is prudent to exercise caution in offering definitive statements, as the situation remains in its early stages. Nevertheless, certain peculiarities have come to light concerning the actions … Continue reading Did Wiz Just Burn Their Mole by Reporting Microsoft’s AI Leak?→
a blog about the poetry of information security, since 1995